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HFMARKS 

The Office Action dated May 18, 2006, has been received and carefully con$idercd. By 
this Annendment, claims 1-6, 9-17, 20-24 are pending, claims 7-8 and 18-19 have been canceled 
by previous ainendnient, and claims 22-24 are added. No new matter has been entered by this 
Amendment. Support for the added claims may be found in par agraphs 0054 and 0065, for 
example. 

Rceonsideraiion of ihe ouistanding rejections in the present application is respectfully 
I'CCjiie.stc^l based on ihe foiiuwing remarks. 

1. THE INDICATION OF ALLOWABLE SimJR Cr MATTER 
Tn the Office Action, claim 2 1 is objected to as being dcpcndeui. upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims. Applicuni appreciates the indication of allowable 
.subject mailer in the Office Action. Tn view of the arguments set forth below regarding claim 1 , 
from which claim 21 depends, such claim 21 has not at this time been placed into independent 
form. 

TT. THE .35 IJ.S.C. S 102 RFjnCTION BASED ON BARTON 

In the Office Action, claims 1-5^ 9-16, and 20 aic rejected under 35 U.S.C. 102(e) as 

being anticipated by Barton ct al, (U.S. 2002/0059093), hereinafter "Barton.*' This rejeclion is 

respectfully traversed. 

In paragraph 7, the Office Action sets forth the basis of the rejection as to claim 1. The 
Office Action asserts that as per claim 1 , Barton teaches a method for use in compliance 
management, comprising: presenting, via a computer network, at least one user with a scries of 
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qucslions nclating to at least one business category (Sec- litairts 1 1, paragrr^phs 00 JO, 0012-4, 
0049, 005 1 , wherein questions aie presented via the network a)nceming compliance risk); 
soliciting, via the computer network, a response from tlic at least one user for each question 
presented (Sec paragraphs 00 10,(X)12-4,(X)4y, 005 1,0060. wherein the questions arc answered); 
determining a detection index based on the number ol' responses to each of the scries of questions 
(Sec paragraphs 0081 and 00U4, wherein detection is determined); determining an occurrence 
index based on the potential consequence of noncompliance (See paragraphs 0007, 008 K and 
0084, wherein cx'currence index is determined); determining a standard severity risk index based 
on the expected severity of noncompliance (See paragraphs 0068, 0072-3, 0075, 0081 , 0084, 
wherein severity indexes are considered); and prioritizing, via the computer network, the at least 
one business category based on the at least one user's responses and ut least one total risk scoix^ 
comprising the product of the detection, occurrence, and standard severity risk indices (Sec 
paragraphs 008 U 0084-7, wlicrein a risk sct)rc is calculated based on these factors. See also 
paragraphs 0068-9, 0072, 008 J. 0090-1, where risk prioritization numbers are generated to 
determine the order to handle the risk area:^ of the business). 

Applicant respectfully submits that Barron fails to teach each and every feature of claim 
1 . As set forth in the listing of claims above, claim 1 is directed to a incthcHi for use in 
compliance management. Various features of the claimed method are set forth, as well as the 
interrelationship between those features, in particular, claim 1 recites the feamre of 
"determining an occurrence index based on die poicniial consequence of non-compliance". 
Accordingly, claim I does not merely recite determining an occurrence index, but recites a 
particular manner in which the occurrence index is determined, i,e., that the occurrence index is 
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based on u potential consequence of non-compliance. Applicant Kuhmits that Barton fails to 
teach such specifics. 

As noted above, the Office Action asserts that Barton teaches determining an occurrence 
index based on the potential consequence of non-compliance (See paragrnphs 0007» 0081 , and 
0084, wherein occurrence index i$ determined). However, Applicant i-espectfiilly subiiiHs that 
such assertion in the Office Action is indeed rctlcctlve of an inappmpriate minimization of the 
claim language. Indc^d^ claim I docs not merely relleci that an occurrence index is deicnnined, 
but rather Llial an occurrence index is determined in a particular manner. Barton fails to leach 
such specifics. 

Applicant notes that Barton is directed to methods and systems For compliance program 
assessment In the Abstract, Barton teaches methods and systems for identifying and quantifying 
cDmpUance issues. Barton describes that in one embodiment, a system is configured to 
implement a method which comprises assessing at least one compliance program to identify 
potential risks and prioritizing ilie poicniiaJ risks. Tlie issues relating to the potential risks, for 
example, failure modes and root causes are identified and are mitigated and controlled. 

As t{) the above feature relating to determination of the occunvncc index, the Office 
Action cites paragraphs 0007, 008 1 , and 0084. Paragraph 0007 of Barton describes that the 
Barton invention facilitates proactive monitoring and measuring of compliance with company 
policies so that appropriate action can be taken to avoid an occurrence of non-compliance. In 
one aspect, a method is provided for conducting a consistent^ documented and yet repeatable 
compliance risk assessment and mitigation process, The method can be practiced using a 
network-based system including a server system coupled to a centralized database and at least 
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one client system. Barton teaches the method comprises the steps of conducting n compliance 
program assessment* conducting a prioritization of compliance risks, identifying potential 
compliance failures including causes and effects and ensuring that risk monitoring and coniixjl 
mechanisms are in place to mitigate compliance risks. 

further. Applicant notes chat relbrcnued paragraph 008J talks further to risk related 
processing. In particular. Barton teaches, with reference to Fig. 14, high-risk process steps arc 
mapped 202 and a failure mode and effects analysi.s matrix (FMEA) is constructed. Tn 
consU-ucting the FMEA a severity rating, current controls hi place are listed 210, a likelihood of 
occurrence factor and a detection ability factor is assigned 212 based on a standard rating system 
which is part of the knowledge base in server 12. Server 12 is configured to use the rating 
system and the entered factors to calculate 214 risk prioririzarion numbers (RJ!^Ns), However, 
these featuj'es fail to teach tlie paixieulai's ofclaini 1 . 

Further, paragrapli 0084 of Barton teaches: 

[0084] Severity raring, occurrence and detection factors previously assigned 212 
(shown in FIG. 14), also are part of FMCA matrix 230. In one embodiment, the severity- 
rating for the QFD mairix during prioritization of the risk is entered into a severity rating 
column 246 in FMEA matrix 230. Then, tfie values for occurrence and detection are 
calculated using any standard rating system. In one embodiment, the standard rating 
system includes values from one to ten.. An occurrence factor measures the likelihood of 
occurrence of non^compliurwe. Tlie likelihood of occurrence measures the frequency of 
non-compliance in the process with a value of one indicating a remote likelihood up to a 
value of ten rcprcscniii^g tiiat failure is assured. The ability to detect (detection) uses a 
similar numerical scheme with a value of one meaning that if there is noncompliance, the 
potential I'liilure will be found or prevented to a value often representing absolute 
certainty that current controls will not delect potential failures or there are no controls in 
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place. Ttie severity rating, occurrence cind detection factors are then entered into the 
FMEA nialrix 230 under a .severity column 246, an occurrence column 248, and a 
detection factor column 250 respectively. (Emphasis added) 

Of particular note, Applicant notes that Barton teaches that "the values for occurrence 
and detection are calculated using any standard rating system." Applicant subjuiis thai such 
disclosure of Baiton reflects the general nature or the '^occurrence" determination of Barton. 
Such teachings of Banon» as well as the otli<jr disclosure of Barton, fail to teach the specifics of 
claim 1 as set forth above, h\ particular. Barton fails to teach the tcami'c of ''determining an 
occurrence index based on the potential consequence of non-compliance''. This is tnie especially 
in the context of the other claimed fe^itui'es of claim 1. 

For at least the reasons set forth above, Applicant submits that claim 1 deilnes patentable 
subject matter. Further, claim 10 defines patentable subject matter at least for reasons similar to 
claim 1. 

Applicant submits that the dependent claims rycile patentable subject matter at least for 
their various dependencies orj claims 1 and 10, as well as for the additional subject matter recited 
in such dependent claims. Claims 22-24 are added to recite further novel features of the 
invention. 

The applied art to Barton fails to teach or suggest such claimed features. Withdrawal of 

the 35 U.S.C. §102 rejection is respectfully requested. 

1". THE 35 U.S.C SI 03 REJECTION RASP.I) ON BARTON 

hi the Office Action, claims 6 and 17 are rejected under 35 U.S.C. 103(a) as being 

unpaLentable over Barton. This rejection is respectfully traversed. 
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As slaicd ill MPEP § 2143, U) esLahlish » prima facie case of obviousness, three basic 
crileria musl be rnet. First, there must be some suggestion or motivation, either in the references 
ihemNelves or in the knowledge general ly available to one of ordinary skill in the art, to modify 
the reference or to combine reference teachings. Second, there inu.st be a reasonable cxpetlation 
of success, Finally^ the prior art reference (or references when combined) mu$i leiich or suggest 
all the claim limitations. The teaching gr suggestion to make the claimed combination and the 
reasonable expectation of success must both be found in the prior art, not in applicant's 
disclosure. In re Vacck . 947 F.2d 488, 20 USPQ2d 1438 (Fed. Cir. 1 991 ). 

With reference 10 claim 6, the Orfice Action alleges that Barton teaches various features, 
as i.s set out in the Office Action. However, the Office Action reflects that Barton does not 
expressly disclose using the number of questions presented to determine u detection index. 

In an attempt to address such deficiency, the Office Action sets out tliat Barton discloses 
a detection index being determined which is used to determine a risk score; and that Barton also 
discloses using information concerning the number of questions presented (and response 
oppoitunitics) to score risk.; and using the number of questions presented as a ba.scline for 
frequency of response is well known in surveys. The Office Action tiicn concludes therefore, it 
would have been obvious to one of ordinary skill in the art at the time of the invention to use the 
number of questions presented (i.e. opportunities) when calculatirig the detection index in order 
to more efncierilly determine the potential for failure concerning a business risk by judging the 
frequency of re?5ponse. 
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Applicant respectfully submits tlul even if such modification were obvious, which is not 
admitted, such modificntion of Barton would fail to address the deficiencies of Barton «s set 
forth above. 

Accordingly, Applicant submits that claims 6 and 17 are aJlowabIc ba.sed on their 
dependency on claims 1 and 10, as well us for the further fcsttures claims 6 and 17 rccilc. 
AVithdrawal of the rejection under 35 U.S.C. §103 is requested. 

IV. CQNCLUS10>f 

In view of the foregoing, it is respectfully submiiied that the present application is in 
condition for allowance, and an enrly indication of the same is courteously soliciled. The 
Examiner is respectfully requested to contact ilic undersigned by telephone at the below listed 
telephone number, in order to expedite resolution of any issues and Li) expedite passage of tlie 
present application to issue, if any comments, questions, or suggestions arise in conncctitm with 
the present application* 

To the extent necessary, a petition for an extension of lime under 37 CFR § 1 . 1 36 is 
hereby made. 
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Please charge any .shortage in fees due in connection wirh the filing of this paper, 
including extension of time fees, to Deposit Account Nt). 50-0206, and please credit any cxcciis 
fees to tlie same deposit account. PtfSt 



JRM/niS 

Hunton & Williams LLP 
1900 K Street, N.W. 
Washington, D.C 20006-1109 
Telephone: (202)955-1500 
Facsimile: (202) 778-2201 

Date: October 18, 2006 
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Rcspccliully suhmirtcd, 
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